feat: schelet gateway FastAPI (API v1 + worker + dashboard + SQLite WAL)

Structura repo conform plan.md sect. 4, booteaza cu /healthz verde:
- app/main.py: FastAPI (lifespan init_db), /healthz (worker viu + last login + queue), /metrics
- app/api/v1: POST /v1/prezentari (enqueue + dedup idempotency UNIQUE), GET prezentari/{id}, nomenclator, mapari
- app/rar_client.py: client RAR real (login/JWT, nomenclator, postPrezentare, getFinalizate) cu User-Agent obligatoriu (fix WAF 403)
- app/worker: proces separat, claim atomic BEGIN IMMEDIATE, heartbeat, login+send (send dezactivat by default)
- app/web: dashboard Jinja2+HTMX (coada, banner alerta blocate, worker viu/mort, stari empty)
- app/db.py + schema.sql: SQLite WAL, tabele accounts/api_keys/operations_mapping/nomenclator_rar/submissions/worker_heartbeat
- app/idempotency.py + payload.py: hash continut canonic + builder payload (status FINALIZATA, fara tipPrestatie)
- Dockerfile + docker-compose.yml (api+worker, volum SQLite persistent, restart:always)
- tools/import_dbf.py: stub T5

Verificat live: login prin rar_client OK (token 259), nomenclator 18 coduri, worker heartbeat -> /healthz worker_alive=True.
Ramas: T3 validare Pydantic, T4 snapshot payload, T2 reconciliere/retry worker, T5 import DBF, auth API-key, middleware redactare creds, criptare PII.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

app/web/routes.py

@@ -0,0 +1,85 @@
+"""Dashboard Jinja2 + HTMX (server-rendered, zero build).
+
+Schelet cu stari explicite: empty (coada goala), banner alerta blocate,
+worker viu/mort, ultimul login RAR. Editor mapari + browser nomenclator +
+export CSV + stare "RAR indisponibil" = de adaugat (plan.md sect. 4 + design-review).
+"""
+
+from __future__ import annotations
+
+from datetime import datetime, timezone
+from pathlib import Path
+
+from fastapi import APIRouter, Request
+from fastapi.responses import HTMLResponse
+from fastapi.templating import Jinja2Templates
+
+from .. import __version__
+from ..config import get_settings
+from ..db import get_connection, read_heartbeat
+
+router = APIRouter(tags=["web"])
+templates = Jinja2Templates(directory=str(Path(__file__).resolve().parent / "templates"))
+
+_BLOCKED = ("error", "needs_data", "needs_mapping")
+
+
+def _status_counts(conn) -> dict[str, int]:
+    rows = conn.execute("SELECT status, COUNT(*) AS n FROM submissions GROUP BY status").fetchall()
+    return {r["status"]: int(r["n"]) for r in rows}
+
+
+def _worker_alive(hb) -> bool:
+    if hb is None or not hb["last_beat"]:
+        return False
+    try:
+        last = datetime.fromisoformat(hb["last_beat"])
+    except ValueError:
+        return False
+    age = (datetime.now(timezone.utc) - last).total_seconds()
+    return age <= get_settings().worker_heartbeat_stale_s
+
+
+@router.get("/", response_class=HTMLResponse)
+def dashboard(request: Request) -> HTMLResponse:
+    conn = get_connection()
+    try:
+        counts = _status_counts(conn)
+        hb = read_heartbeat(conn)
+        blocked = sum(counts.get(s, 0) for s in _BLOCKED)
+        ctx = {
+            "request": request,
+            "rar_env": get_settings().rar_env,
+            "version": __version__,
+            "counts": counts,
+            "blocked": blocked,
+            "worker_alive": _worker_alive(hb),
+            "last_login": hb["last_rar_login_ok"] if hb else None,
+        }
+        return templates.TemplateResponse("dashboard.html", ctx)
+    finally:
+        conn.close()
+
+
+@router.get("/_fragments/banner", response_class=HTMLResponse)
+def fragment_banner(request: Request) -> HTMLResponse:
+    conn = get_connection()
+    try:
+        counts = _status_counts(conn)
+        blocked = sum(counts.get(s, 0) for s in _BLOCKED)
+        return templates.TemplateResponse("_banner.html", {"request": request, "blocked": blocked})
+    finally:
+        conn.close()
+
+
+@router.get("/_fragments/submissions", response_class=HTMLResponse)
+def fragment_submissions(request: Request) -> HTMLResponse:
+    conn = get_connection()
+    try:
+        rows = conn.execute(
+            "SELECT id, status, id_prezentare, rar_status_code, rar_error, retry_count, updated_at "
+            "FROM submissions ORDER BY id DESC LIMIT 100"
+        ).fetchall()
+        return templates.TemplateResponse("_submissions.html", {"request": request, "rows": rows})
+    finally:
+        conn.close()

app/web/templates/_banner.html

@@ -0,0 +1,5 @@
+<div class="card banner {% if not blocked %}hidden{% endif %}"
+     hx-get="/_fragments/banner" hx-trigger="every 15s" hx-swap="outerHTML">
+  <strong>Atentie:</strong> {{ blocked }} submission-uri blocate (error / needs_data / needs_mapping).
+  Plasa de siguranta pe pene RAR &gt; 30h. Verifica coada mai jos.
+</div>

app/web/templates/_submissions.html

@@ -0,0 +1,20 @@
+{% if rows %}
+<table>
+  <thead><tr><th>#</th><th>Stare</th><th>idPrezentare</th><th>HTTP RAR</th><th>Retry</th><th>Actualizat</th><th>Motiv</th></tr></thead>
+  <tbody>
+  {% for r in rows %}
+    <tr>
+      <td>{{ r.id }}</td>
+      <td><span class="pill s-{{ r.status }}">{{ r.status }}</span></td>
+      <td>{{ r.id_prezentare or '—' }}</td>
+      <td>{{ r.rar_status_code or '—' }}</td>
+      <td>{{ r.retry_count }}</td>
+      <td class="muted">{{ r.updated_at }}</td>
+      <td class="muted">{{ (r.rar_error or '')[:80] }}</td>
+    </tr>
+  {% endfor %}
+  </tbody>
+</table>
+{% else %}
+<div class="empty">Coada e goala. Trimite o prezentare prin <code>POST /v1/prezentari</code>.</div>
+{% endif %}

app/web/templates/base.html

@@ -0,0 +1,39 @@
+<!DOCTYPE html>
+<html lang="ro">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>{% block title %}Gateway RAR AUTOPASS{% endblock %}</title>
+  <script src="https://unpkg.com/htmx.org@1.9.12"></script>
+  <style>
+    :root { --bg:#0f1115; --card:#181b22; --ink:#e6e9ef; --muted:#8b93a7; --line:#262b36;
+            --ok:#3ecf8e; --warn:#e6b34a; --err:#e5605e; --accent:#5b8def; }
+    * { box-sizing:border-box; }
+    body { margin:0; font:15px/1.5 system-ui,sans-serif; background:var(--bg); color:var(--ink); }
+    header { padding:16px 24px; border-bottom:1px solid var(--line); display:flex; align-items:center; gap:12px; }
+    header h1 { font-size:16px; margin:0; font-weight:600; }
+    header .env { font-size:12px; color:var(--muted); border:1px solid var(--line); padding:2px 8px; border-radius:99px; }
+    main { padding:24px; max-width:1100px; margin:0 auto; }
+    .card { background:var(--card); border:1px solid var(--line); border-radius:10px; padding:16px 20px; margin-bottom:16px; }
+    .banner { border-left:3px solid var(--err); background:#241a1a; }
+    .banner.hidden { display:none; }
+    table { width:100%; border-collapse:collapse; font-size:14px; }
+    th,td { text-align:left; padding:8px 10px; border-bottom:1px solid var(--line); }
+    th { color:var(--muted); font-weight:500; font-size:12px; text-transform:uppercase; letter-spacing:.04em; }
+    .empty { color:var(--muted); padding:24px; text-align:center; }
+    .pill { font-size:12px; padding:2px 8px; border-radius:99px; border:1px solid var(--line); }
+    .s-queued{color:var(--accent);} .s-sending{color:var(--warn);} .s-sent{color:var(--ok);}
+    .s-error,.s-needs_data,.s-needs_mapping{color:var(--err);}
+    .muted { color:var(--muted); }
+    a { color:var(--accent); }
+  </style>
+</head>
+<body>
+  <header>
+    <h1>Gateway RAR AUTOPASS</h1>
+    <span class="env">{{ rar_env }}</span>
+    <span class="muted" style="margin-left:auto; font-size:13px;">v{{ version }}</span>
+  </header>
+  <main>{% block content %}{% endblock %}</main>
+</body>
+</html>

app/web/templates/dashboard.html

@@ -0,0 +1,28 @@
+{% extends "base.html" %}
+{% block content %}
+
+<div class="card banner {% if not blocked %}hidden{% endif %}"
+     hx-get="/_fragments/banner" hx-trigger="every 15s" hx-swap="outerHTML">
+  <strong>Atentie:</strong> {{ blocked }} submission-uri blocate (error / needs_data / needs_mapping).
+  Plasa de siguranta pe pene RAR &gt; 30h. Verifica coada mai jos.
+</div>
+
+<div class="card">
+  <div style="display:flex; gap:24px; flex-wrap:wrap;">
+    <div><div class="muted">Worker</div><div class="{{ 's-sent' if worker_alive else 's-error' }}">
+      {{ 'viu' if worker_alive else 'mort' }}</div></div>
+    <div><div class="muted">Ultimul login RAR</div><div>{{ last_login or '—' }}</div></div>
+    <div><div class="muted">In coada</div><div>{{ counts.get('queued', 0) }}</div></div>
+    <div><div class="muted">Trimise</div><div class="s-sent">{{ counts.get('sent', 0) }}</div></div>
+    <div><div class="muted">Blocate</div><div class="{{ 's-error' if blocked else '' }}">{{ blocked }}</div></div>
+  </div>
+</div>
+
+<div class="card">
+  <h2 style="font-size:14px; margin:0 0 12px;">Coada submissions</h2>
+  <div hx-get="/_fragments/submissions" hx-trigger="load, every 10s" hx-swap="innerHTML">
+    <div class="empty">se incarca…</div>
+  </div>
+</div>
+
+{% endblock %}